Privacy policy

1. Controller

Email for data protection requests: support@halwick-labs.com

No data protection officer has been appointed.

2. Scope

This privacy policy applies to the public website at https://halwick-labs.com and its German- and English-language static pages. It does not cover future product applications, user accounts, or services for which separate privacy information will be provided.

3. Accessing and hosting the website

When you access the website, technically necessary request data is transmitted to the hosting provider. This may include your IP address, requested URL, date and time, referrer URL, browser and operating system, status code, and transferred data volume. Processing serves to deliver the website, maintain stability and security, prevent abuse, and investigate errors. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this information service.

The website is delivered through GitHub Pages. The providers are GitHub B.V., Prins Bernhardplein 200, 1097 JB Amsterdam, the Netherlands, and GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. GitHub documents that visitors’ IP addresses are logged for security when GitHub Pages sites are visited. Further information: GitHub Pages – Data collection and the GitHub General Privacy Statement.

GitHub may process data in the United States and other countries. GitHub describes its EU-US Data Privacy Framework certification and the European Commission’s standard contractual clauses as safeguards. Information and links relating to these safeguards are available in GitHub’s linked privacy statement.

We do not operate our own application server or custom server logging. Retention of technical logs generated by GitHub is governed by GitHub’s policies and security practices.

4. Domain and DNS

The domain is managed through INWX GmbH, Prinzessinnenstraße 30, 10969 Berlin, Germany. When the domain name is technically resolved, DNS queries and associated technical data may be processed by the participating DNS services. This processing is required to make the website reachable and is based on Article 6(1)(f) GDPR. Further information: INWX privacy policy.

5. Contact by email

If you contact us by email, we process your email address, name, message content, attachments, and technical email metadata. Providing this information is voluntary. A reachable sender address and the information necessary for your request are required if you want us to reply.

Processing is carried out to handle your request on the basis of Article 6(1)(f) GDPR. Our legitimate interest is responding to inquiries and maintaining business communication. Article 6(1)(b) GDPR applies to pre-contractual or contractual matters, and Article 6(1)(c) GDPR applies where statutory retention obligations exist.

The mailboxes are hosted by mailbox.org, a service of Heinlein Hosting GmbH, Schwedter Straße 8/9A, 10119 Berlin, Germany. Further information: mailbox.org data protection notice. We do not use tracking pixels or tracked links in outgoing emails.

Ordinary contact and support messages are deleted twelve months after the matter is closed. They are retained for longer only where needed for a contractual relationship, a statutory retention obligation, or the establishment, exercise, or defense of legal claims.

6. Cookies, device storage, and consent

This website uses no non-essential cookies, analytics or advertising identifiers, browser fingerprinting, or Local Storage or Session Storage access for analytics or advertising. Your browser may cache technically necessary files served from this domain. Consent is not required insofar as this is strictly necessary to provide the website you requested.

Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) generally requires consent for storing information on a terminal device or accessing information stored there unless a statutory exception applies. Because this website uses no technology that requires consent, no consent banner is displayed.

7. Fonts and third-party content

Inter and Space Grotesk are served locally from this domain. Loading them does not connect to Google Fonts, fonts.gstatic.com, Adobe Fonts, or another font provider. The website also embeds no analytics services, advertising pixels, maps, video players, social-media plugins, CAPTCHAs, or externally hosted JavaScript libraries.

8. Recipients

Where necessary, recipients of personal data may include GitHub as hosting provider, INWX as domain and DNS service provider, Heinlein Hosting as email service provider, participating network and telecommunications providers, and public authorities or legal advisers where disclosure is legally required. We do not sell personal data.

9. Your rights

Subject to the GDPR’s requirements, you have rights including access, rectification, erasure, restriction of processing, and data portability. Where processing is based on consent, you may withdraw that consent at any time with effect for the future. Contact support@halwick-labs.com to exercise your rights.

10. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority. Our competent authority is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany. Information and complaint options are available at www.ldi.nrw.de. You may also contact an authority at your habitual residence, place of work, or the place of the alleged infringement.

11. Automated decisions

This website uses no automated decision-making or profiling within the meaning of Article 22 GDPR.

12. Security and updates

The website is delivered over an encrypted HTTPS connection. This privacy policy will be updated before forms, analytics tools, embedded third-party content, externally loaded fonts, non-essential cookies, user accounts, or product features are introduced.

Last updated: 11 July 2026